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Abstract 

Homogeneous rotation symmetric Boolean functions have been exten- 
ds , sively studied in recent years because of their applications in cryptogra- 
phy. Little is known about the basic question of when two such functions 
are affine equivalent. The simplest case of quadratic rotation symmetric 
functions which are generated by cyclic permutations of the variables in 
a single monomial was only settled in 2009. This paper studies the much 
more complicated cubic case for such functions. A new concept of patterns 
is introduced, by means of which the structure of the smallest group G n , 
whose action on the set of all such cubic functions in n variables gives 
the affine equivalence classes for these functions under permutation of the 
variables, is determined. We conjecture that the equivalence classes are 
C^ ' the same if all nonsingular affine transformations, not just permutations, 

are allowed. Our method gives much more information about the equiva- 
lence classes; for example, in this paper we give a complete description of 
the equivalence classes when n is a prime or a power of 3. 

1 Introduction 

Boolean functions have many applications in coding theory and cryptography. A 
detailed account of the latter applications can be found in the book [2] . If we de- 
fine V n to be the vector space of dimension n over the finite field GF(2) — {0, 1}, 
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then an n variable Boolean function f(xi,X2, ■■-,x n ) — /(x) is a map from V n 
to GF(2). Every Boolean function /(x) has a unique polynomial representation 
(usually called the algebraic normal form |U p. 6]), and the degree of / is the 
degree of this polynomial. A function of degree < 1 is called affine, and if the 
constant term is such a function is called linear. If every term in the algebraic 
normal form of / has the same degree, then the function is homogeneous. All 
functions studied in this paper will be homogeneous. We let B n denote the set 
of all Boolean functions in n variables, with addition and multiplication done 
mod 2. 

If we list the 2™ elements of V n as vq = (0, . . . , 0), Vi = (0, . . . , 0, 1), . . . in 
lexicographic order, then the 2™-vector (f(vo),f(vi), . . . , /(«2™-i)) is called the 
truth table of /. The weight (also called Hamming weight) wt(f) of / is defined 
to be the number of l's in the truth table for /. In many cryptographic uses of 
Boolean functions, it is important that the truth table of each function / has an 
equal number of 0's and l's; in that case, we say that the function / is balanced. 

The distance d(f, g) between two Boolean functions / and g is defined by 

d(f,g)=wt(f + g) 

where the polynomial addition is done mod 2. An important concept in cryp- 
tography is the nonlinearity N(f) defined by 

N(f) = min wt(f + a). 

a affine 

We say a Boolean function /(x) in B n is rotation symmetric if the alge- 
braic normal form of the function is unchanged by any cyclic permutation of 
the variables x\, X2, ■ ■ ■ ,x n . In recent years, rotation symmetric functions have 
proven to be very useful in several areas of cryptography [2, pp. 108 - 118]. This 
has led to many papers which study different aspects of the theory of rotation 
symmetric functions (see the references in [21 pp. 108 - 118]; some especially 
nice applications are in [5]). 

We say that two Boolean functions /(x) and fif(x) in B n are affine equivalent 
if <?(x) = /(Ax-fb), where A is an n by n nonsingular matrix over the finite field 
GF(2) and b is an n-vector over GF(2). We say /(Ax+b) is a nonsingular affine 
transformation of /(x). It is easy to see that if / and g are affine equivalent, 
then wt(f) — wt(g) and N(f) = N(g). We say that the weight and nonlinearity 
are affine invariants. 

One basic question is to decide when two Boolean functions /(x) and <?(x) 
in B n are affine equivalent. This question is nontrivial even for n = 2. The next 
section is devoted to this quadratic case. 

2 Affine equivalence of quadratic rotation sym- 
metric Boolean functions 

Before turning to the cubic functions, we look at what can be proved in the 
simpler quadratic case. We shall consider only the simplest quadratic functions 



/, namely those generated by cyclic permutations of the variables in a single 
monomial. We shall call such functions monomial rotation symmetric functions, 
or MRS functions, for brevity. Thus any quadratic MRS function /(x) in n 
variables can be written as 

/n,j(x) = XlXj + X 2 X J + i + ... + X n Xj-l (1) 

for some j with 2 < j < \p-^\ , or, in the special case when n is even and 
j = § + 1, as 

/„,»+! (x) = xiXj + x 2 x J+ i + ... + x^x n . (2) 

This latter function has only ^ terms, whereas the functions in ([1]) have n 
terms. Because of this, we shall call the function / n] ™. +1 (x) the short quadratic 
function in n variables. 

Even in the quadratic case, it is necessary to consider restricted classes 
of functions, because the affine equivalence problem for general functions is 
notoriously difficult. Some work on restricted classes of cubic functions is in the 
papers [U[5]. 

The basic theorem on affine equivalence of general quadratic Boolean func- 
tions was proved by Dickson; his 1901 book on this and related topics has been 
reprinted in [4] . A modern exposition of Dickson's work from a coding theory 
viewpoint is in [SJ pp. 438-442]. 

Theorem 2.1. (Dickson) Suppose f in B n has degree 2. If f is balanced, then 
f is affine equivalent to x\x 2 ^x^xa + • ■ ■ + ^2fc-i^2/c +^2fe+i for some k < " s ^- ■ 
If f is not balanced, then f is affine equivalent to X1X2 + X3X4 + . . . + X2k-iX2k + b 
for some k < f and b in GF(2). Ifwt(f) < 2 n ~\ then 6 = 0. If wt(f) > 2 n ~\ 
then 6 = 1. 

Given a function / of degree 2, after we find the quadratic form in Theorem 
12.11 which is equivalent to / (unfortunately to do this is not trivial) , it is easy 
to compute wt(f) and N(f). The result is 

Lemma 2.2. Suppose g in B n has the form X^j=i x 2i-iX2i + Si=2fe+i (k%i with 
k < f . Then N(g) = 2 n ~ l - 2»- fc - 1 . If all of the m are 0, then wt(g) = N(g); 
otherwise wt{g) = 2" , so g is balanced. 

Proof. Two different proofs appear in [8j pp. 441-442] and [3 Lemma 5, p. 
429]. 

Our next lemma (well-known to experts in this area) follows from Theorem 
ED and Lemma [231 

Lemma 2.3. Two quadratic functions f and g in B n are affine equivalent if 
and only if wt(f) = wt(g) and N(f) = N(g). 



Remark 2.4. For functions of degree > 2, it is not true that the affine invariants 
weight and nonlinearity suffice to determine the affine equivalence classes. An 
example is fi(x) = x\x^ and fi(x) = x\X2X% + x\x^ in B±. These two functions 
both have weight and nonlinearity equal to 4, but they are not affine equivalent 
since they have different degrees. 

The weight and nonlinearity of the quadratic MRS functions f n _2 were de- 
termined in [TU] and [3] pp. 292-297] (the latter paper supplied proofs for some 
cases not done in the former paper) . A much simpler proof of these results was 
given by Kim et al. in [7J Lemma 7, p. 430]. Furthermore, in [71 Theorem 
8, p. 43f] the weight and nonlinearity of all of the MRS functions / raj (x) was 
determined by using a new method. Their work associates the permutation p n j 
defined by 

p n j (i) = i + j — 1 mod n for j = 1, 2, . . . , n (3) 

with the function / nj (x) defined in (pj. Note that this permutation is just a 
cyclic shift of the integers 1,2, ... ,n. They prove the following theorem which 
determines the weight and nonlinearity of f n j [3 Theorem 8 and Remark 10, 
p. 431]. 

Theorem 2.5. (Kim et al.) Suppose that the permutation p n j associated with 
the function f n ,j, 2 < j ' < [ !i 2~H > has the disjoint cycle decomposition T\Ti ■ ■ ■ Tfe. 
Then the number of cycles is k = gcd(n,j — 1) and all the cycles have the same 
length \. Also for 2<j< [2±1] we have 

wt(f n ,j) = N(f n>j ) = 2"- 1 - 2 n / 2+fe - 1 if | is even 

wt{f nd ) = 2 n -\N(f n>j ) = 2"- 1 - 2 ("+ fc )/ 2 - 1 if | is odd 

For the short quadratic function, 

urt(/„,3+i) - W(/„,$+i) = 2"- 1 - 2f - 1 

Theorem 2.6. The quadratic MRS functions / n>r and f n>s are affine equivalent 
if and only if gcd(n, r — 1) = gcd(n, s — 1). 



Proof. The "if part follows from Lemma O and Theorem [231 The "only if 
part follows since by Lemma 12.31 the hypothesis of affine equivalence implies 
wt{f n ,r) = wt(f n , s ) and N(f n>r ) = N(f n , s ). Then by Theorem EH gcd(n, r - 
l) = gcd(n,s-l). D 



Theorem 12.51 shows that it is easy to compute the weight and nonlinearity 
for any MRS quadratic function f n j. We only need to find the integer k = 
gcd(n,j — 1). This gives a quick way to find the equivalent form in Theorem 
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We now have enough to prove that in finding a nonsingular affine transfor- 
mation which maps one quadratic MRS function to another equivalent one, we 



need only look at permutations of variables, not arbitrary nonsingular affinc 
transformations. 

Theorem 2.7. If two quadratic MRS functions in B n are affinc equivalent, 
then there is a permutation of the n variables which gives the equivalence. 

Proof. We need not consider the short function ©, because it is easy to see 
that the affine equivalence class for the short function has only one element. 
Suppose that the two functions f n ^ r and /„. s of form |1| are afhne equivalent. 
It follows from Lemma [2.31 that vjt(f n>r ) = wt(f„ tS ) and N(f n<r ) = N(f n>a ). 
Hence Theorem 12.51 implies that gcd(n,r — 1) = gcd(n, s — 1); we let k denote 
this common value. It follows from Theorem 12.51 and the definition ([3]) of the 
permutation p n j that the permutations p n , r and p n>s have cycle decompositions 
of form 

k 
Y[(i, i + j - 1, i + 2(j - 1), . . . , i + (~ - l)(j - 1)), 

i=l 

where j = r and s, respectively. We use the notation 



n 
Cij = (i,i + j - 1,%+ 2(j - 1), ..., i + (- - l)(j - 1)), 1 < i < k 

for the k cycles in the product. 

There are many ways to define a permutation £ such that £{f n ,r) — fn,s- 
One natural way is to define £ by taking £(1) = 1 and £(r) = s (that is, £ maps 
the leading term x\x r of /„ ir to the leading term x\x s of f n ,s)- Then we can 
extend £ to every entry in the cycle C\ >r , using the rotation symmetry of the 
functions, to get 

n 
£(1 + u(r - 1)) = 1 + u(s - 1) mod n, < u < - - 1. 

k 

Extending this same pattern to the other cycles Cj r , the complete definition of 
£is 



iii + u(r - 1)) = i + u(s - 1) mod n, < u < -r - 1,1 < % < k. (4) 

Clearly £(CV r ) = Cj ]S for 1 < i < k and this proves the theorem. □ 

Remark 2.8. The proof of Theorem 12.71 shows that if f n , r and f n ,s of form 
([I} are affine equivalent, then we can define a permutation £ which maps /„ jr 
to f n ^ s by choosing £ to map the pair {1,7"} to the pair {a, b} in either order, 
where x a Xb is any one of the n monomials in the representation (JlJ of f n ,s- In 
this case, £(Ci ir ) may map to a cycle whose entries are a permutation of the 
entries in C J]S for some j ^ i. In the proof of Theorem 12.71 the simplest choice 
a = 1, b — s was made. 



Example 2.9. We take n = 10 and consider /io,3 and /io,5 in Biq. These 
functions are affine equivalent by Theorem l2.6l Following the proof of Theorem 
12. 71 we can define a natural permutation £ such that £(/io,3) = /io,5 by letting 
£(1) = 1,£(3) = 5, £(2) = 2, £(4) = 6. Completing the definition of £ using Q 
gives 

£((1,3, 5, 7, 9)) = (1,5, 9, 3, 7) and £((2,4, 6, 8, 10)) = (2,6, 10,4, 8). 

Thus this map £ maps the two cycles of pio,3 = (1,3, 5, 7, 9)(2, 4, 6, 8, 10) to the 
two cycles of pi ,5 = (1, 5, 9, 3, 7)(2, 6, 10,4,8). 

We can define another permutation £i such that £i(/io,3) = /io,5 by letting 
£i(l) = 6,£i(3) = 2,£i(2) = l,£i(4) = 5. Then the method in the proof of 
Theorem 12.71 gives the full definition of £i as 

£((1,3,5,7, 9)) = (6, 2, 8, 4, 10) and £ 1 ((2,4,6,8, 10)) = (1,5,9,3, 7). 

In this case £i maps the cycle (2,4,6,8,10) in p w ^ to the cycle (1,5,9,3,7) 
in Pio,5: but £i maps the cycle (1,3,5,7,9) in pio,3 to a cycle (6,2,8,4,10) in 
which the order of the integers in the corresponding cycle (2, 6, 10, 4, 8) in pio,5 
is permuted. 

Remark 2.10. It is easy to see that we cannot extend Theorem 12.71 to assert 
that if two quadratic MRS functions in B n are affine equivalent, then only per- 
mutations will give the equivalence. For example, the function /^(x) (using 
the notation <jTJ) ) in B^ is affine equivalent to itself by the nonsingular nonper- 
mutation map 

V\ = Xl +X 2 + X 3 , JJ2 = X2 + X 3 + X4, 

2/3 = Xl + X 3 + X4,, Vi = X 1 + X 2 + Xa, 

under which /4.2(x) = f±.2(y)- If we go up to 8 variables, then we can find an 
example of a quadratic MRS function which is affine equivalent to a different 
quadratic MRS function by a nonpermutation map. We can take /s,2(x) and 
define the nonpermutation map by 



Xl = W 2 + W4+ W 7 , x 2 = w 5 + W 7 + W$, X 3 — W± + W 7 + Wg, 

£4 = w 3 + W 7 + W$, X 5 = W A + W 6 + W 7 , X 6 = Wi +w 7 + w$, 

x 7 = w 7 , x 8 = w s . 

Now computation gives /^(x) = /^(w). 

Remark 2.11. It is also easy to see that there exist affine equivalent quadratic 
homogeneous functions which cannot be shown to be equivalent by any permu- 
tation of variables. We simply drop the hypothesis in Theorem 12 . 71 that the two 



functions are rotation symmetric. An example is /^(x) in B4 and g(x) — X\X% 
in B4. These functions are easily seen to be affine equivalent by Theorem 12.11 
or Lemma 12.31 but no permutation of variables can give this equivalence, since 
any permutation applied to a function preserves the number of variables which 
actually appear in that function. 

3 Affine equivalence for cubic rotation symmet- 
ric Boolean functions 

Almost nothing is in the literature concerning afhne equivalence for cubic ro- 
tation symmetric Boolean functions. We shall consider the simplest of such 
functions /, namely those generated by cyclic permutations of the variables in 
a single monomial. These are the cubic monomial rotation symmetric (MRS) 
functions, in the terminology of Section [3] Thus for some j and k, 1 < j < k, 
we have 

/(x) = X\XjXk + X2X J + 1 X k+1 + ... + X n Xj-lXk-l- (5) 

We shall use the notation (1, j, k) for the function /(x) in ([5]), no matter how 
the terms on the right-hand side are written (so the order of the terms, and of 
the 3 variables in each term, does not matter). If (1, j, k) is written in the form 
([5]) (so the first subscripts in the n terms are 1, 2, . . . , n in order, and the other 
two subscripts in order each give cyclic permutations of 1, 2, . . . , n, as shown), 
we say / is written in standard form. Note we do not require j < k, so there 
are two ways to write /(x) in standard form. If we specify the representation 
of /(x) ( (l,j,k) or (l,fc, j) ), then the standard form is unique. Clearly each 
subscript j, 1 < j < n, appears in exactly 3 of the terms in any representation of 
/(x); we shall call these three terms the j-terms of /. We shall use the notation 

[i,j,k] = XiXjXk (6) 

as shorthand for the monomial on the right-hand side; note that the order of the 
variables matters, so, for example, the 6 permutations of i,j,k give 6 different 
(but equal) representations of form ([6]) for the same monomial XiXjXk- 

If n is divisible by 3 , then the function (1,^+1,^ + 1) is exceptional because 
then the representation (JSJ) has only ^ distinct terms, because the three j-terms 
for any j are all the same, apart from the order of their factors. Thus for 
n = mod 3 the representation §5§ reduces to a sum of only ^ terms. Because 
of this, we shall call (1,^ + 1,^ + 1) the short cubic function in n variables. 

In order to study the afhne equivalence classes for the functions (1, j, k), we 
need to be able to identify all of the distinct functions (1, j, k). We define 



D n = {(1, J, k) : j < k < n, and every function (l,j,k) is represented by 

the triple l,j,k with least j, and given that, with least k}. 



Every cubic monomial rotation symmetric function / is equal to exactly one 
function (l,j, k) in D n , but of course / is also equal to (l,p,q), where [l,p, q] 
is either of the other two 1-terms in (l,j, k). 

Clearly we can determine D n by making a list of all of the functions (1, j, k) 
with 1 < j < k < n in lexicographic order and standard form, and then crossing 
out any function in the list which has a 1-term appearing in any earlier function 
in the list. The number of distinct functions which remain after this is given 
in the following lemma (as usual, \S\ denotes the number of elements in the set 
S). 

Lemma 3.1. 7/n = 0mod3, then \D n \ — (n 2 — 3n + 6)/6. Otherwise, \D n \ = 
(n 2 -3n + 2)/6. 

Proof. An equivalent formula was first computed by Stanica and Maitra [111 
p. 302]. A direct counting proof is also possible. The "extra" function when 
n = mod 3 is the short function (1,~ + 1,^ + 1), which is the last function 
produced when D n is determined by the method above. □ 

We define the notion of pattern for any term [i,j, k]. The pattern of [i,j, k] 
is the integer vector 

(j - i Mod n; k — i Mod n;k - j Mod n). (7) 

The semicolons in ([7]) distinguish a pattern from a function (i,j, k). Throughout 
the paper the "capital mod" notation a Mod n means the unique integer b in 
{1,2,..., n} such that b = a mod n. When the modulus n is clear, we shall omit 
the Mod n in the notation ([7]). Every term [i, j, k] has 6 patterns (a; b; c), one 
for each of the orderings of the triple i,j,k. 

Lemma 3.2. Each function (l,j, k) in standard form has a unique pattern 
(j — 1 Mod n; k — 1 Mod n;k — j Mod n), which is the same for all of the n 
terms [u, v, w] in the standard form of the function. 

Proof. This is obvious since in the standard form ([5]) the subscripts in each 
term are obtained by adding 1 to each of the corresponding subscripts in the 
preceding term. □ 

Lemma 3.3. Suppose (1, j,k) in standard form and (1, p,q) are cubic monomial 
rotation symmetric functions in n variables. If ju((l, j, k)) — (l,p,q) for some 
permutation fj, of the n variables, then all of the terms 

[iu,(i),iu,(i+j-l),iu,(i + k-l)], l<i<n (8) 

can be rearranged to give a standard form of the function (l,p, q). All of these 
rearranged terms will have the same pattern. 

Proof. We can order the terms in ([8]), permuting their entries as necessary, to 
get the function (l,p, q) in standard form. Then Lemma [3.3l follows from Lemma 

EH □ 



We say a permutation a of the n variables in a cubic function preserves 
rotation symmetry if, given any cubic MRS function / in B n , cr(f) is also ro- 
tation symmetric. Our next theorem shows that if two cubic MRS functions 
in B n are affine equivalent via a permutation of variables which preserves ro- 
tation symmetry, then there is a computationally efficient method to find such 
a permutation, even one with the extra property that the permutation fixes 1. 
We conjecture that there is no loss of generality in considering only affine maps 
which are permutations (see Remark 13.91 below) . Furthermore, in applications 
using rotation symmetric functions, functions which do not have rotation sym- 
metry are usually of no interest, so the permutations which preserve rotation 
symmetry are the only important ones. 

Before stating the theorem, it is useful to have a characterization of the 
permutations which preserve rotation symmetry. The next lemma gives this; 
note that the characterization is equivalent to (jTTJ) in the theorem below. There 
is no loss of generality in taking n > 4 in the next lemma and theorem, since 
the cases for smaller n are trivial. 

Lemma 3.4. A permutation fi preserves rotation symmetry for cubic MRS 
functions in n > 4 variables if and only if 

fj,(i) = {%- 1)(m(2) - 1) + 1 Mod n, 1 < i < n. (9) 

Proof. We note there is no loss of generality in assuming /i(l) = 1. It is trivial 
that (j9|) implies that /i preserves rotation symmetry; so we assume that /z pre- 
serves rotation symmetry and we shall prove ([9]) . Throughout the proof, = will 
always mean congruence mod n. 

Suppose ju((l,2,3)) = (l,p,q). We will write (l,p,q) in the standard form 
which contains the term /i([2, 3, 4]) = [p, q, x\. Then, by Lemma [3~3l [p, q, x] has 
the same pattern as some rearrangement of [l,p, q] and we want to determine 
the value of x. 

We know that there are six possible patterns for the monomial [l,p, q], and 
these patterns are the six ordered triples in the following list: 

i (p - 1; q - 1; q - p) from [i,p, q] 

2 (q-l;p-l;p-q)irom[l,q,p] 

3 (1 - p; q - p; q - 1) from [p, 1, q] 

4 (q - p; 1 - p; 1 - q) from [p, q, 1] 

5 (p-q;l-q;l-p) from [q,p, 1] 

6 (1 — q;p — q;p — 1) from [q, l,p] 

The pattern of [p, q, x] must be one of these six patterns, and in order to 
determine x we test the six cases in sequence. We have 

Pattern of [1 , p, q] = (p — 1 ; q — 1; q — p) and 



Pattern of [p, q,x] = (q — p;x — p;x — q), where x = £t(4). 

For the first case, assume q — p = p — 1, => q = 2p — 1. 

Then x — p = q — 1 , => x — p = 2p — 2 => a; = 3p — 2. 

Then q — p = 2p—l—p = p—l should also be = x — q = 3p — 2 — 2p+l = p — 1. 

This is true, so x = 3p — 2 or x = 3(p — 1) + 1 is a possibility. 

Next assume q — p = q — 1. Then p — 1, which is false. 

Next assume g — p = 1 — p. Then <? = 1, which is false. 

Next assume (q — p; x — p; x — q) = (q — p; 1 — p; 1 — q). Then 1 — p = x — p and 

1 — q = x — q so x = 1. This can only happen when n = 3. 

Next assume q — p = p — q. Then 2{q — p) = 0, so 2p = 2q (mod n). 

Then, x — p = 1 — q =^* x = 1 — q + p, and 2x = 2 — 2q + 2p = 2. 

Also, x — q = 1 — p => x = 1 — p + q = 1 — q + p, as above. So 

.x = 1 — p + q is possible. 
Lastly, assume q — p = 1 — q. Then 2q = 1 + p, =^ p = 2q — 1. 

Then, x— p = p — q = 2q — 1— q = q — 1 

and x - p = x - (2g - 1) =$> x = (g - 1) + (2g - 1). 
Thus x = 3q - 2. 

Then, x — q = p — I = 2q — 2 and 

x — q = ('iq — 2) — (q) = 2q — 2 are consistent, so x = 3q — 2 is a possibility. 

Summarizing, we have x 6 {1 — p + q 7 3(q — 1) + 1, 3(p — 1) + 1}. We shall 
prove only the third choice for x is valid. 

Now we consider these three possible choices for x in the next term [q, x, y] 
in M(l,2, 3)). 

First suppose x = 1 — p + q, so we also have 2p = 2q from the work above. 

Then: 

Pattern of [q, x, y] = (1 — p; y — q; y — 1 + p — q), where y = /x(5). 

First assume 1 — p = p — 1. Then 2p = 2 (mod n). 
Then y-q = q-l =^> y = 2g -1 = 2-1 = 1. 

Then p(l) = /u(5) =^> 1 = 5 =^> = 4 =^> n = 4. 
Next assume 1 — p = q — 1. Then g + p = 2 (mod n) . 

Then y — q = p — 1 => y = p + q — 1=2— 1 = 1. 

Then p(l) = p(5) =^> 1 = 5 =^> n = 4. 
Next assume 1 — p = 1 — p. 

Then y — q = q — p => y = 2q — p = 2p — p = p. 

Then fi(2) = p(5) =^> n = 3. 
Next assume 1 ~ p = q — p. Then q = 1, impossible. 

Next assume 1 — p = p — q. Then l = 2p — q = 2q — q = q, so q = 1, impossible. 
Next assume 1 — p = 1 — q. Then p = q, impossible. 

So we cannot get the next term and thus x = 1 — p + q is not a valid choice. 
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Next suppose x = 3(g — 1) + 1, so also p = 2g — 1 from the work above. 

Then: 

Pattern of [q,x,y] = (2(g — l);y — g; y — 3g + 2). 

First assume 2(g — 1) =p — 1. 

Then p = 2(g - 1) + 1 = 2g - 1. 

Then, y — q = q — 1 =>• y = 2q — 1. 

Also, g— p = y — 3g + 2 

<S> g - 2(g - 1) - 1 = 2g - 1 - 3g + 2. 

■&■ — q + 1 = — g + 1, which is true. 

So y = 2g — 1 = p works numerically. However, then fj,(2) — p = y = /i(5) =>■ 

n — 3. 

Next assume 2(g — 1) = q — 1. Then g = 1, impossible. 

Next assume 2(g - 1) = 1 -p = 1 - (2g - 1) = -(2g - 2) = -2(g - 1). Then 

4(g-l) =0 =^ 4 9 ee4. 

Then p = 2g - 1 = 4g - 1 - 2g = 3 - 2g. 

Then y — q = q — p = q — 3 + 2g = 3g — 3. 

So j/ = 4g -3=4-3 = 1. 

Then /x(l) = /i(5) ==^ n = 4. 
Next assume 2(g - 1) = g - p = g - (2g - 1). Then 2(g - 1) = -g + 1, => 
3(g-l) = =^ 3g = 3. 

Then p = 2g — 1 ^=> p = 3g — 1 — g = 3 — 1 — g = 2 — q. 

Then y — q = 1 — p => y — g = l — (2 — g)=g — 1. 

So y = 2g — 1 = p, so p(2) = ^(5) ^=> n = 3. 
Next assume 2(g — 1) = p — g= (2g— 1) — g = g — 1. Then g — 1 = ==>• g = 1, 
impossible. 
Next assume 2(g - 1) = 1 - g. Then 3(g - 1) = =► 3g = 3. 

Then y — q =p— q = 2q — 1 — g = g — 1, so y = 2g — 1 = p. 

Then p(2) = /i(5) =>■ n = 3. 

So we cannot get the next term and thus x = 3(g — 1) + 1 is not a valid 
choice. 

Thus the only valid choice is x = 3(p — 1) + 1, and so we also have g = 2p — 1 
from the work above. Hence for n > 4, /i((l,2,3)) = (l,p, g) =^ /^(2) = 
p, ju(3) = g = 2p— 1 and /u(4) = 3p — 2. 
We now wish to show by induction that 

H(i) = (i- l)(p - 1) + 1 = (i - 1)( M (2) - 1) + 1, 

which will give ©■ We already proved this for i G {1, 2, 3, 4} as a base case. 
Assume true for some i > 4, and for i — 1, i — 2, % — 3. 

Then /*([* -l,i,i+ 1]) = [(« - 2)(p - 1) + 1, {% - l)(p- 1) + 1,*] and we need 
to determine the value of x. 

The pattern for this term is (p — 1; x — (i — 2)p + (i — 3); x — (i — l)p + (i — 2)). 
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First assume the pattern is (p — 1; q — 1; q — p) = (p — 1; 2p — 2;p — 1) 
<4>a;-(i-2)p+(i-3) = 2p-2 =*■ x = (i-2 + 2)p-(2 + i-3) =ip-(i-l). 
So x = ip — (i — 1) = (i + 1 — l)(p — 1) + 1 works. 
Next assume p — 1 = q — 1, then q = p, impossible. 
Next assume p — 1 = 1 — p. Then 2p = 2. 

Then x — (i — 2)p + (i — 3) = q — p = 2p — 1— p = p — 1 =>■ CC = 
(*-2 + l)p-(t-3 + l) = (i-l)p-(t-2). 

Then /i(i) = p.(i + 1) =>• n = 1, impossible. 
Next assume p — l = q— p = 2p— 1— p = p— 1. Clearly true. Then: 

x-(i-2)p+(i-3) = l-p =► x = (i-2-l)p-(i-3-l) = (i-3)p-(i-4). 

Then n(i + 1) = fj,(i - 2) =*> j + 1 = » - 2 =*> 3 = =*> n = 3. 
Next assume p — 1 = p — q. Then q = 1, impossible. 
Next assumep-1 = l-q= l-(2p-l) = 2-2p. Then 3p-3 = =$> 'ip = 3. 

Then a; - (i - 2)p + (i - 3) = p - q = p - (2p - 1) = 1 -p 
=»• x = (i - 2 - \)p - 0' - 3 - 1) = (* - 3)p - (i - 4) 
=> fi(i + 1) = /i(i — 2) =>• n = 3. 

Thus only the first case gives the value of x and the proof by induction of 
© is complete. □ 

Theorem 3.5. Suppose (l,j,k) in standard form and (l,p,q) are cubic mono- 
mial rotation symmetric functions in n > 4 variables. If fj,((l,j,k)) = (l,p,q) 
for some permutation \x of the n variables which preserves rotation symmetry, 
then there exists a permutation a such that a((l,j,k)) = (l,p,q), cr([l,j,k]) = 
[l,Pi,qi] and <r(l) = 1, where [l,pj,g,] (1 < i < 3) is one of the three l-terms 
in (l,p, q). The pattern of the term [1, o~(j), o~(k)\ in a((l,j,k)) is 

(a(2)-l){j-l;k-l;k-j), (10) 

where gcd(<r(2) — l,ri) = 1. Furthermore, a satisfies 

a(i) = (i- l)(o-(2) - 1) + 1 Mod n, 1 < i < n. (11) 

Proof. We may assume without loss of generality that (l,j, k) and (l,p,q) are 
in D n . Suppose p.(v) = 1, 1 < v < n. Define the permutation 5 by 

5(w) — u + ui — 1 Mod n. 

Since <5 is a cyclic shift of l,2,...,n, we have S((l,j,k)) = (l,j,k). Obviously 
p.(8(l)) = /i(u) = 1, so we can take a = fi6. Since tr((l,j, k)) = (l,p, g) and 
<t(1) = 1, we must have <t([1,j, fe]) = [l,pi,qi] where [l,pi,qi] (i — 1,2 or 3) is 
one of the three l-terms in (l,p, q). 

Now (fTTj) follows from Lemma [3T4l Next consider the pattern (cr(j)— 1; cr(fc) — 
1; cr(fc) — cr(j')) of the term 

cr([l,i,A]) = [l,tT(j),a(fc)]. (12) 
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By Lemmas l3.3l and l3.4[ the term [a (2), erf 7 + 1), a(k+l)] mcr((l,j, k)) = (l,p,q) 
must have the same pattern as the term in (|12[) . so we have 



[a(2),a(j + l),a(k + 1)] = [1 + cr(2) - l,a(j) + cr(2) - 1, a(k) + a(2) - 1]. 

Similarly, all of the terms 7j = [cr(i),cr(j + i — l),<r(fe + i — 1)] in (l,p, q) for 
i = 1, 2, . . . , n must satisfy 



[cr(z),cr(j+i-l),(7(fc + Z-l)]= (13) 

[1 + (t - l)(a(2) - 1), a(j) + (t - l)(cr(2) - l),cr(fc) + (t - l)(a(2) - 1)]. 

Thus Ti is obtained from T^_i by adding cr(2) — 1 to each entry in Tj_i. This 
is equivalent to (fTTjl. Also, this shows (take i = j or k, respectively, in (p~5]) ) 

(i - 1)(ct(2) - 1) = a(j) - 1 Mod n (14) 

and 

(fc-l)(<r(2)-l) = o-(fc)-lModn. (15) 

Subtracting (Tl4l) from (TlSl) gives 

(fc - i)(cr(2) - 1) = cr(fc) - cr(j) Mod n. (16) 

Together, flU}, (ffU) and ^TBJ show 



(cr(j) - 1; a(fc) - 1; a(k) - a(j)) = (a(2) - l)(j - 1; k - 1; fc - j), 

that is, the pattern of [l,cr(j),CT(fc)] is (fT0|) . as stated in the Theorem. 

From p^|) and the fact that a(i) must take on all values 1, 2, . . . , n for 1 < 
i < n, we see that 

{1 + (* - l)(tr(2) - 1) : 1 < i < n} = {1, 2, . . . ,n} . 

Therefore gcd(er(2) — 1, n) = 1 and the proof is complete. □ 

Example 3.6. We take n = 8, so that 

D 8 = {(1,2, 3), (1,2, 4), (1,2, 5), (1,2, 6), (1,2, 7), (1,3, 5), (1,3, 6)}. 

If n = (1, 4, 3, 6, 5, 8, 7, 2) (we represent permutations as products of disjoint 
cycles), then 

/i((l, 3, 6)) = M ([1, 3, 6] + [2, 4, 7] + . . . + [7, 1, 4] + [8, 2,5]) = 

([4, 6, 5] + [1, 3, 2] + . . . + [2, 4, 3] + [7, 1,8]) = (1, 3, 2). 
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This gives v = 2 in the proof of Theorem 13.51 so 5(w) = w + 1 mod 8 and 
a = ix5= (1)(3)(5)(7)(2, 6) (4, 8). Thus cr([l, 3, 6]) = [1, 3, 2] and 



<r([l, 3, 6] + [2, 4, 7] + . . . + [7, 1, 4] + [8, 2,5]) = 

[1,3, 2] + [6, 8, 7] + ... + [7, 1,8] + [4, 6, 5] = (1,3, 2). 

The pattern of [1,3,6] is (2; 5; 3), a (2) — 1 = 5 and the pattern of [1,3,2] 
is (2;1;7) = 5(2; 5; 3), in accordance with Theorem 13.51 Notice we need the 
standard form generated by the term [1, 3, 2], even though of course the functions 
(1, 2, 3) and (1, 3, 2) are the same. 

Let <7 T)T( = o~ T denote the permutation defined by 

a T (i) = (i — 1)t + 1 Mod n for i = 1, 2, . . . , n, 

where we assume 

gcd(r, n) = gcd(er r (2) - 1, n) = 1. 

Then we have 

gcd(cr T (j) — 1, n) = gcd((j — l)r, n) = 1 if and only if gcd(j — 1, n) = 1. 

Since a T as = o&o T = a T $ for any 5 with gcd((5, n) — 1, we see that G n defined 
by 

G n = Wr.n ■ gcd(r, Tl) = 1} 

is a group with the group operation of permutation composition. 

Theorem 3.7. The group G n is isomorphic to the group U n of units of Z* 
given by 

U n = {k:gcd(k,n) = l} 
with group operation multiplication mod n. 

Proof. The bijection <r T f> r is a group isomorphism. □ 

Theorem 3.8. The group G n acts on the set 

G n = {cubic MRS functions f(x) in n variables} 

by the definition 

0- r ,n(f(x)) = VT,n(( l J,k)) (17) 

where f{x) has the unique standard form (l,j,k) in D n . The orbits for this 
group action are exactly the affine equivalence classes for C n under permutations 
which preserve rotation symmetry. 
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Proof. The group action is denned by a T ([a 7 b,c\) = [a T (a),a T (b),o- T (c)] for 
each term [a, b, c] in (l,j,k). It follows from Theorem 13. 51 that if any cubic MRS 
function /(x) = (l,j, k) in standard form is affine equivalent to any cubic MRS 
function <?(x) = (l,p,q) by a permutation which preserves rotation symmetry, 
then there exists a permutation a TiTl in G n such that o~ T>n ({\, j, k)) — (l,p, q). 
Now the fact that the orbits are exactly the affine equivalence classes under 
permutations which preserve rotation symmetry follows from Lemmas 13.21 and 
I3"3l □ 

Remark 3.9. We conjecture that if two cubic MRS functions in B n are affine 
equivalent, then there is a permutation of the n variables which gives the equiv- 
alence. This cubic analog of Theorem 12.71 cannot be proved in the same way 
as the earlier result, since there seems to be no cubic version of Theorems 12.51 
and 12.61 thus proving the conjecture may be difficult. It is well known that 
the frequency count of the absolute values of the Walsh spectrum for a Boolean 
function is an affine invariant (see [21 pp. 7 - 12]). Using this fact, we proved 
the conjecture for n < 32. We did not need to do any computation for the cases 
n < 21, since the needed data for these cases are given in the Online Database 
of Boolean Functions |9|. In all cases for n < 32, we verified that whenever two 
equivalence classes given by the action of G n have the same weight and nonlin- 
earity, then the classes have different frequency counts for the Walsh spectrum. 
For some small values of n this is very easy, since all equivalence classes given 
by the action of G n have different weights; this is true, for instance, for n = 9 
(see Table 1 below). 

Remark 3.10. We want to determine the smallest group whose action (|17|) 
gives the affine equivalence classes. In the trivial cases n — 3 and 4 there is only 
one function in C n so we can take the smallest group to be the identity alone. In 
the case n = 5 there are two functions (1, 2, 3), (1, 2, 4) in one equivalence class 
and the cyclic group generated by the 4-cycle permutation (2453) maps these 
functions to each other. For n = 6 there are three classes: {(1, 2, 3)}, {(1, 3, 5)} 
and {(1, 2,4), (1, 2, 5)} and direct calculation shows that the group Gq of or- 
der 2 (generated by the product of three transpositions (16)(25)(34)) is the 
smallest one which gives the equivalence classes. Similarly, for n — 7 there 
are two classes {(1, 2, 3), (1, 2, 5), (1, 3, 5)} and {(1, 2, 4), (1, 2, 6)} and the cyclic 
group Gr of order 6 (generated by the 6-cycle £ = (243756)) is the smallest one 
which gives the equivalence classes. Finally, for n = 8, there are four classes 
{(1,2,3), (1,3,6)}, {(1,2,4), (1,2,7)}, {(1,2,5), (1,2,6)} and {(1,3,5)}. The 
group G% = {o"i,(T3,CT5, (T7 } is a noncyclic group of order 4. Each of the non- 
identity elements 0-3 , 175 , 177 of order 2 fixes both elements of exactly one of the 
three 2-element equivalence classes, so Gg is the smallest group which gives the 
four equivalence classes. 

The next theorem shows that for n > 6 the group G n is always the smallest 
one which gives the equivalence classes, by using the group action in Theorem 
Since |G n | = ip(n) (<p is Euler's function) and the structure of the group 
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U n in Theorem 13.71 is well-known, this gives a detailed description of the affine 
equivalence classes of C n under permutations which preserve rotation symmetry. 

Theorem 3.11. For n > 6, the group G n of order <p(ri) is the smallest group 
whose action (|17[) gives the equivalence classes of C' n under permutations which 
preserve rotation symmetry. 

Proof. We know from Theorem 13.81 that the orbits of the action p7|) of G n on 
C' n are the affine equivalence classes, so we need only prove that no smaller 
group will give the equivalence classes. For n = 6, 7, 8 this follows from the 
calculations referred to in Remark 13.101 For n > 8, we prove that the function 
/(x) = (1,2,4) in n variables is always in an equivalence class of length <p{ri). 
Since the order of G n is (p(n), this shows that no smaller group can give the 
equivalence classes of G n , as stated in the theorem. 

We actually show that for n > 8 the identity e of G n is the only element of 
G n which fixes / = (1, 2, 4), that is, the stabilizer of (1, 2, 4) is e. By elementary 
group theory this means the orbit of (1, 2, 4) (which by Theorem l3.8l is the same 
as its equivalence class) has length <p(n), as required. 

So we suppose that for some r relatively prime to n we have 

ov((l,2,4)) - (l,r + l,3r + l) = (1,2,4). 
This means that the term [1, r + 1, 3r + 1] satisfies 

[1,t + 1,3t + 1] = [1,2,4] or [l,3,n] or [l,n-2,ra-l] (18) 



In the first case in (ITS)) , we must have either r + 1 = 2 mod n and 3t + 1 = 
4 mod n (so r = 1 and <ji = e) or r + 1 = 4 mod n and 3r + 1 = 2 mod n (so 
r = 3 mod n and 8 = mod n, giving n — 8; in this case, 03 fixes (1, 2, 4)). 

In the second case in (|18[) . we must have either r + 1 = 3 mod n and 3r + 1 = 
mod n (so r = 2 and n — 7; in this case a 2 fixes (1, 2, 4)) or t + 1 = mod n 
and 3r + 1 = 3 mod n (so r = —1 mod n and —2 = 3 mod n, giving n = 5 and 
r = 4). 

In the third case in (1181) , we must have either r + 1 = n — 2 mod n and 
3r + 1 = n — 1 mod n (so r = —3 mod n and 7 = mod n, giving n = 7 and 
r = 4; in this case <74 fixes (1, 2, 4)) or t + 1 e n - 1 mod n and 3t + 1 = 
n — 2 mod n (so r = —2 mod n and 3 = mod n, giving n = 3). Thus if n > 8, 
pT|) is only possible if er T = e and the theorem is proved. □ 

4 The equivalence classes for prime n 

If the number of variables is a prime p, then we can obtain a very detailed 
description of the affine equivalence classes. Define 

E(n) = number of equivalence classes of cubic MRS functions in n variables. 
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We can evaluate E(n) by using the well-known Burnside's Lemma applied to 
the group G n acting on C n , as described in Theorem 13.81 Let 



Fix(o) = number of functions in C n fixed by a. 
Lemma 4.1. We have 

E{n) = (1/|G„|) J2 Fi <°)- 

<?EG n 

Proof This is a special case of Burnside's Lemma for counting orbits. By The- 
orem [21H1 the orbits in this special case are the affine equivalence classes. □ 

The next theorem gives a complete description of the number and size of the 
affine equivalence classes when the number of variables is a prime. 

Theorem 4.2. Suppose p is a prime. Then 

E(p) = [p/6] + 1. 

Suppose p > 5. There is exactly one equivalence class of size (p — l)/2, namely 
the class containing (1,2,3). If p = 1 mod 6, there is exactly one equivalence 
class of size (p — l)/3. If p = 1 mod 6, all the remaining E(p) ~ 2 equivalence 
classes have size p—1. If p = 5 mod 6, all the remaining E(p) — 1 equivalence 
classes have size p — 1 . 



To prove Theorem 14.21 we will need the following three lemmas. 

Lemma 4.3. If p is prime, then every affine equivalence class of cubic MRS 
functions in p variables contains a function (1,2, to) for some m > 2. 

Proof. It suffices to show that if (l,j, k) is any function in p variables, then 
there is some permutation o T £ G p such that 

o- T ((l,j,fc)) = (l,2,m) (19) 

for some m. Equation (|19[) holds if there exists some r not divisible by p such 
that 

(1, (j - l)r + 1 Mod p, (k - l)r + 1 Mod p) = (1, 2, m) (20) 

for some integer m > 2. Now (|2U|) implies (j — l)r + 1 = 2 mod p and for any 
j with 2 < j < p — 1 this linear congruence has a unique solution r Mod p with 
r not divisible by p. Given this solution r, an integer m for which ([20]) holds is 
to = (k — l)r + 1 Mod p, as given in (|20|) . Since r ^ mod p, we have m^l. 
Since (j — 1)t = 1 mod p and j ^ k, we have to 7^ 2. Thus to > 2, as required. 

□ 

Lemma 4.4. For n > 3, the function (1,2,3) is always in an affine equivalence 
class of size ip(n)/2. The identity e and o- n -i are the only elements ofG n which 
fix the functions in this class. 
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Proof. We have <r n _i( (1, 2,3) ) = (l,n,n— 1) = (1,2,3), so er„_i fixes (1,2,3). 
Since G n is Abelian, this means a n -i fixes all of the elements in the equivalence 
class of (1,2,3). Now suppose that for some r relatively prime to n we have 

ct t ((1,2,3)) = (1,t+1,2t+1) = (1,2,3). 
This means that the term [1, r + 1, 2r + 1] satisfies 

[1,t + 1,2t+1] = [1,2,3] or [l,2,ra] or [l,n-l,n]. (21) 



In the first case in ([2Tj) we have either r + 1 = 2 mod n and 2r + 1 = 3 
mod n (so r = 1 and o~\ — e) or r + 1 = 3 mod n and 2r + 1 = 2 mod n (so 
r = 2 and 3 = mod n, which gives n = 3). In the second case in (|2Tj) we have 
either r + 1 = 2 mod n and 2r + 1 = mod n (so r = 1 and 3 = mod n, 
which gives n = 3)orr + l = mod n and 2t + 1 = 2 mod n (so r = n — 1 
and 3 = mod n, which gives n = 3). In the third case in (|2ip we have either 
t + 1 = n — 1 mod n and 2t + 1 = mod n (so r = n — 2 and 3 = mod n, 
which gives n = 3)orr+l = mod n and 2r + 1 = n — 1 mod n (so r = n — 1; 
we already saw that <r„_i fixes (1, 2,3) ). 

Thus there are exactly two elements of G n which fix (1,2,3), that is, the 
stabilizer of (1,2,3) has order 2. Since \G n \ = <p(n), by elementary group 
theory the orbit of (1,2,3) (which is the same as its equivalence class) has 
length (p(n)/2. □ 

Lemma 4.5. Assume p = 1 mod 6 is prime. Then the order of o~ r in G p is 
3 if and only if r 3 = 1 mod p. There are exactly two such elements of order 
3 in G p and they have the form o~k and <7 fc 2 Mod p for an integer k > 1 which 
satisfies fc 3 = 1 mod p. Both of these permutations fix the functions in the same 
equivalence class of size (p — l)/3, namely the class containing (1,2, fc + 2). 

Proof. Since G p is cyclic by Theorem 13.71 elements of order 3 exist if and only 
if p = 1 mod 6, and then there are exactly two elements a T 6 G p with order 
3. If ak has order 3, then cr fe (2) = fc + 1 Mod p, a\{2) = fc 2 + 1 Mod p and 
cr|(2) = (fc 3 + l) Mod p — 2. Thus fc 3 = 1 mod p and the other element of order 
3 is (Tfc2 Mod p . Since fc 3 — 1 = (fc— l)(fc 2 +k + l) we have fc 2 + fc + 1 = mod p. 
Therefore a k ( (1,2, A; + 2) ) = (1, fc + 1, fc 2 + fc + 1) = (l,fc + l,p) = (1,2, A; + 2) 
and CTfc2 Mod p = crfe(crfe) also fixes (1, 2, fc + 2). Thus the two elements of order 3 
fix all the functions in the class containing (1, 2, fc + 2). Hence the stabilizer of 
(1, 2, fc + 2) has order 3 and therefore the class containing (1, 2, fc + 2) has size 
(p-l)/3. 

Conversely, if r 3 = 1 mod p, then reversing the above argument shows that 
o> and er T 2 have order 3. Note that t 3 — 1 = (t — l)(r 2 + r + 1) = mod p 
gives the congruence 4(r 2 + r + 1) = (2t + l) 2 + 3 = mod p, which always 
has two roots when p = 1 mod 6 since then —3 is a quadratic residue mod p 
by quadratic reciprocity. □ 

Proof of Theorem \4-2\ We use Lemma |4 . 1 1 with n — p prime to evaluate E(p). 
Thus it suffices to determine Fix(a) for all a £ G p . By Lemma f4.3[ if a G G p 
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fixes any equivalence class containing a function (1, j, k) e D n , we may assume 
that a fixes some function (1, 2, m) with to > 2. So suppose 

er T ( (1, 2, to) ) = (1, t + 1, (m - 1)t + 1) = (1, 2, to) 

for some r with 1 < r < p. This means that the term [1, r + 1, (m — l)r + 1] 
satisfies 

[1,t + 1,(to-1)t+1] = [1,2, to] or [l,m-l,p] or [l,p-m+2,p-m+3]. (22) 

In the first case in (f2"2")h we have either t+ 1 = 2 mod p and (to— 1)t+1 = to 
mod p (so t — \ and <7i = e) or r + 1 = to mod p and (m — 1)t + 1 = 2 mod p 
(so t = to — 1 mod p and (to — l) 2 = 1 mod p; since p is prime this gives either 
to = p [so <j T fixes (l,2,p) = (1,2,3), which by Lemma |4~21 gives a T equal to e 
or <Tp_i] or to = 2 [impossible]). 

In the second case in (|22p , we have either r + 1 = to — 1 mod p and (to — 
l)r + 1 = p mod p or t + 1 = p mod p and (to — l)r + 1 = to, — 1 mod p. 
The first pair of congruences gives r = to — 2 mod p and (to — 1)(to — 2) = —1 
mod p. This implies 



m 
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3to + 3 = mod p, (23) 

so (2m — 3) 2 = —3 mod p and there are exactly two values of to which give 
solutions; therefore —3 is a quadratic residue mod p and so by quadratic reci- 
procity we have p = 1 mod 6. Also (|23[) implies 

r 3 = (to - 2) 3 = -3to 2 + 9to - 8 = 1 mod p, 

so by Lemma l4.5l ov has order 3. The second pair of congruences gives r = p— 1 
and 2to = 3 mod p, that is, m = (p + 3)/2. This implies that cr p _i fixes the 
class containing (1,2, (p + 3)/2), but this is the same as the class containing 
(1, 2, 3), since a (p+1)/2 ((l, 2, 3)) - (1, 2, (p + 3)/2). 

In the third case in (|22[) . we have either r + 1 = p — to + 2 mod p and 
(to — 1)t+ 1 =p — ni + 3 mod p or r + 1 = p — to + 3 mod p and (m — l)r+ 1 = 
p — 777, + 2 mod p. The first pair of congruences gives r = p — to + 1 mod p 
and (to — 1) (p — to + 1) + 1 = p — to + 3 mod p. This gives ([2"3"]) again, so p = 1 
mod 6 and a T again is one of the two elements of order 3 in G p . The second pair 
of congruences gives r = p — to + 2 mod p and (to — 1) (p — m + 2) + 1 = p — m+2 
mod p. This gives (to — l)(m — 3) = mod p, so either m = 1 (impossible) or 
77i = 3. Thus o> fixes (1, 2, 3), which by Lemma 14.41 gives a T equal to e or <j p -\. 

Combining the results above, we see that Fix{a) — unless a is e or er p _i 
(for any prime p > 5) or one of the two elements of order 3, namely o^ and 
<7fc2 Mod p with k 3 = 1 mod p (for p = 1 mod 6). We also have 

Fix(e) = | Dp | = (p 2 - 3p + 2)/6 (24) 

by Lemma l3~Tl Fix(a p ^i) = (p— 1)/2 by Lemma l4T4l ( since we proved above that 
the only class fixed by ct p _i contains (1, 2, 3)) and Fix((Jk) = Fix((Jk 2 Mod p) = 
(p — l)/3 by Lemma 1431 Plugging our data into Lemma |4~T1 gives E{p) — 
[p/6] + 1, and the other assertions in the theorem then follow by computation 
using (23). 
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5 Equivalence Classes for n 



ok 



For the convenience of the reader, we give tables of the equivalence classes for 
n = 9 and 27 below. These may be helpful in following the proofs in this section. 
The classes are arranged in lexicographical order of their representatives in D n . 
My research assistants Max Bileschi and Dan Padgett computed tables like these 
for hundreds of values of n, and these were of great value in formulating and 
checking several of the theorems in this paper. 

If the number of variables is a power of 3, then we can obtain a very detailed 
description of the equivalence classes. We begin with a few preliminary lemmas. 
We assume throughout this section that n denotes the number of variables for 
our cubic MRS functions. 

Lemma 5.1. If n — 3 k for k > 1, then there is a unique equivalence class of 
size 1, and it has representative f\ — (1, 3 fe_1 + 1,2- 3 fe_1 + 1) in D n . This is 
the short function in n variables. 

Proof. It suffices to show that /i is the only function fixed by all a € G n . It 
is easy to see that every a fixes /i, so it suffices to show that a 2 defined as in 
Section 3 by 

a 2 (i) = 2(i- 1) + 1 Mod n for i = l,2,...,n 

fixes only f\. If o~2 fixes (1, r, s) with r < s we have 

[l,r,s] =[l,2r-l,2s-l] or [l,2(s - r) + l,n - 2r + 3] or (25) 

[l,n-2s + 3,n-2(s-r) + l]. 

In the first case in (|25p we have either r = 2r — 1 mod n and s = 2s — 1 
mod n (so r = s = 1 mod n, which is impossible) or r = 2s — 1 mod n and 
s = 2r — 1 mod n (this implies r = s = 1 mod 3 fe_1 and so, since r < s, we 
must have r = 3 k ~ 1 + 1 and s — 2 • 3 fe_1 + 1; this gives f\). 

In the second case in (|25|) we have either r = 2s— 2r+l mod n and s = — 2r+ 
3 mod n (this implies 7r = 7 mod n, so r = 1 mod n, which is impossible) 
or r = — 2r + 3 mod n and s = 2s — 2r + 1 mod n (this implies r = s = 1 
mod 3 fe_1 , so as before we get /i). 

In the third case in (|25p. we have either r = — 2s + 3 mod n and s = 
—2s + 2r + 1 mod n (this implies 7s = 7 mod n, so s = 1 mod n, which is 
impossible) or r = — 2s + 1r + 1 mod n and s = — 2s + 3 mod n (this implies 
s = 1 mod 3 fc_1 , which again gives f\). D 

Lemma 5.2. If n — 3 fe /or A: > 1, then there is no equivalence class of size 2. 

Proof. It suffices to show that the only function / such that cr^(f) = f for all r 
not divisible by 3 is / = f\ (the short function in n variables); then by Lemma 
15.11 the size of the equivalence class of / is 1 . 

So we suppose that for some function (1, r, s) with r < s we have 

o?((l,r,*)) = (l,(r-l)r 2 + l,(s-l)r 2 + l) = (l,r,s). 
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Table 1: Affine equivalence classes for cubic MRS functions in 9 variables 



Class 



Functions 



Class 1, size 3 (1,2,3) (1,2,6) (1,3,5) 

Class 2, size 6 (1,2,4) (1,2,5) (1,2,7) (1,2,8) (1,3,6) (1,3,7) 

Class 3, size 1 (1,4,7) 



Table 2: Affine equivalence classes for cubic MRS functions in 27 variables 



Class Size 



Functions 



Class 1 


9 


(1,2,3) 
(1,6,17) 


Class 2 


18 


(1,2,4) 
(1,4,11) 
(1,6,12) 


Class 3 


18 


(1,2,5) 
(1,3,16) 
(1,5,16) 


Class 4 


18 


(1,2,6) 
(1,3,8) 

(1,5,12) 


Class 5 


18 


(1,2,7) 
(1,3,18) 
(1,5,11) 


Class 6 


18 


(1,2,10) 
(1,3,19) 
(1,6,15) 


Class 7 


3 


(1,4,7) 


Class 8 


6 


(1,4,10) 


Class 9 


1 


(1,10,19) 



1,2,15) 

1,8,15) 

1,2,14) 
1,4,12) 
1,6,16) 

(1,2,8) 
1,3,22) 

1,5,17) 

(1,2,9) 
1,3,11) 
1,5,15) 

1,2,13) 
1,3,25) 

1,5,22) 

1,2,11) 
1,3,21) 
1,6,19) 

1,4,16) 

1,4,13) 



(1,3,5) 
(1,8,18) 

(1,2,16) 
(1,4,20) 
(1,6,18) 

(1,2,22) 

(1,4,9) 

(1,6,13) 

(1,2,12) 
(1,3,14) 
(1,5,18) 

(1,2,17) 

(1,4,8) 

(1,7,15) 

(1,2,19) 
(1,5,10) 
(1,8,17) 

(1,7,13) 

(1,4,19) 



(1,5,9) 
(1,9,17) 

1,2,26) 
1,4,21) 
1,6,22) 

1,2,25) 
1,4,14) 
1,6,21) 

1,2,18) 
1,3,17) 
1,5,21) 

1,2,23) 
1,4,15) 
1,7,20) 

1,2,20) 
1,5,14) 
1,8,19) 



(1,6,11) 

(1,3,7) 
(1,5,13) 
(1,7,14) 

(1,3,9) 
(1,4,18) 
(1,7,17) 

(1,2,21) 
(1,3,20) 
(1,6,14) 

(1,3,6) 
(1,4,17) 
(1,8,16) 

(1,3,10) 
(1,5,19) 
(1,9,18) 



(1,3,24) 
(1,5,20) 
(1,7,21) 

(1,3,15) 
(1,4,23) 
(1,7,18) 

(1,2,24) 
(1,3,23) 
(1,6,20) 

(1,3,13) 
(1,4,24) 
(1,8,20) 

(1,3,12) 
(1,5,23) 
(1,9,19) 



(1,4,22) (1,7,16) (1,7,19) 



A Mathcmatica program which very quickly calculates tables like these for n 
not too large (say n < 800) is available from the author. 
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We take r = 2, and then it follows that 

[l,4r-3,4s-3] = [l,r,s] or [1, s-r+l,3 fc -r+2] or [1, 3 fc -s+2, 3 fe +r-s+l]. 

As in the proof of Lemma 15.11 this gives three alternatives, each involving two 
choices of a pair of congruences, and we call these six cases Al, A2, Bl, B2, CI 
and C2, respectively. 

Case Al gives Ar — 3 = r mod 3 fc and 4s — 3 = s mod 3 k , so r = s = 1 
mod 3 fc_1 . This means r = 3 fe_1 + 1 and s = 2 • 3 k ~ 1 + 1 (since we know r < s), 
so (1, r, s) = f\. Case A2 gives Ar — 3 = s mod 3 fe and 4s — 3 = r mod 3 fe , 
so 4(4s — 3) = s + 3 mod 3 fc , which implies s = 1 mod 3 fc_1 . By a symmetric 
argument, we also get r = 1 mod 3 fe_1 . By the argument in Case A2, we again 
obtain (l,r, s) = /i. 

Case Bl gives 4r — 3 = s — r+1 mod 3 fe and 4s — 3 = — r + 2 mod 3 fe , 
so s = 5r — 4 mod 3 fe and 4(5r — 4) = — r + 5 mod 3 fe . This implies r = 1 
mod 3 fc_1 ; substituting this into 4s — 3 = — r + 2 mod 3 fc gives s = 1 mod 3 fc_1 . 
Now (1, r, s) = /i as in Case A2. Case B2 gives Ar — 3 = — r + 2 mod 3 fc and 
4s — 3 = s — r+1 mod 3 k ; the former congruence implies r = 1 mod 3 fc , which 
is impossible. 

Case CI is the same as Case B2 with r and s interchanged, so we get s = 1 
mod 3 fc , which is impossible. Case C2 is the same as Case Bl with r and s 
interchanged, so again we get (1, r,s) = fx- □ 

Lemma 5.3. If n = 3 fc and k > j > 2, then the equivalence class of fj = 
(1, 3 k ~i + 1, 2 • S^ -3 + 1) has size 3 J_1 . TTiis is the only class of size S^ 1 for 
n = 3 k . 

Proof. We first show that af (fj) = /j for any r (of course we have gcd(r, 3) = 
1 since a T is in G n ). We have 

af ~\fj) = (l^^r 3 " 1 + 1,2 • 3 fe - J r 3i_1 + 1) (26) 

and r 3J = (r/3) mod S- 3 (here (r/3) is a Legendre symbol). So the right-hand 
side of (|26|) is /j if r = 1 mod 3 or is 

(1, 3 fe - 3 fe ^ + 1, 3 fc - 2 • 3 fc ^ + 1) = fj 

if r = 2 mod 3. 

This shows that the size of the equivalence class of fj divides 3- 7-1 . If j = 2, 
the size must be 3 for any k > 2 because from Lemma 15.11 we know that the 
only class of size 1 contains the short function. We know from Table 1 above 
that for n = 9 the class of f% = (1, 2, 3) is the only class of size 3. We now show 
that also for k > 3, the class of fa is the only class of size 3. 

We suppose that 

a 3 ( (1, r, s) ) = (1, (r - l)r 3 + 1, (s - l)r 3 + 1) = (1, r, s) (27) 

for every r, and we prove that (1, r, s) is either equivalent to the short function 
or (1, r, s) belongs to the class of /2, that is, (1, r, s) must be affine equivalent to 



22 



/2. We do this by induction, so we assume that the result is true when n = 3 k ~ 1 
and we prove it for n — 3 fc . We already have the base case when k = 2. 
It follows from fl27J| that 

[l,(r-l)r 3 + l,( S -l)r 3 + l] = [l,r, S ] or (28) 

[l,s-r + l,3 fc -r + 2] or [l,3 fe + r - a + l,3 fe - a + 2]. 

As in the proof of Lemma I5T21 this gives six possibilities, which we call cases 
Al, A2, Bl, B2, CI and C2. 

First we take r = n - 2 in (|2"8"]), Then Case Al gives -8r + 9 = r mod 3 fc 
and —8s + 9 = s mod 3 fe , so r = s = 1 mod 3 fc ~ 2 . This implies 

r = a ■ 3 fc ~ 2 + 1 and a = b ■ 3 fc ~ 2 + 1 for some a and b, (29) 

which includes (l,r, s) = / 2 . Case A2 gives — 8r + 9 = s mod 3 fc and —8s + 
9 = r mod 3 fc . Substituting the first congruence into the second gives r = 1 
mod 3 fc_2 , and by symmetry also a = 1 mod 3 fe ~ 2 . Therefore (|29]l is again true 
and substituting those formulas into the first congruence gives —8a = a = b 
mod 9. This is impossible since then we would have r = s mod 3 fe from (|2"9"|) . 

Case Bl gives -8r + 9 = s-r + l mod 3 fe and -8s + 9 = -r + 2 mod 3 fc , 
so s = — Ir + 8 mod 3 fc . Substituting this into the first congruence gives 
r = 1 mod 3 fc_1 and so also s = 1 mod 3 k ~ 1 . This implies that r, s must 
be 3 fc_1 + 1,2- 3 fc_1 + 1, so (1, r, s) is the short function, which by Lemma [5Tl 
has class size 1. Case B2 gives — 8r + 9 = — r + 2 mod 3 fc and —8s + 9 = a — r + 1 
mod 3 fc . The first congruence already gives a contradiction since it implies r = 1 
mod 3 fc , which is impossible. 

Case CI gives second congruence — 8s + 9 = — s + 2 mod 3 fc , which gives the 
contradiction s = 1 mod 3 fc , as in Case B2. Case C2 gives —8r + 9 = — s + 2 
mod 3 fc and — 8s + 9 = r — a + 1 mod 3 fc , so we have Case Bl with r and s 
switched, which gives (|2"9"|) with r and s switched. 

Now without loss of generality we can assume that if (1, r, s) satisfies (|27|) . 
then (|2U) holds. We now take r = 2 in ([2"5)l. Then Case A 1 gives 8r - 7 = r 
mod 3 fc and 8s — 7 = s mod 3 fc . This implies r = s = 1 mod 3 fc , which 
is impossible. Case A2 gives 8r — 7 = s mod 3 fc and 8s — 7 = r mod 3 fc . 
Substituting the second congruence into the first gives 63s = 63 mod 3 fe , which 
leads to (|29|) again. If we assume (f29f and substitute into the first congruence, 
we obtain a + b = mod 9. Thus we can take b = 9 — a and we get (1, r, s) — 
(1, a • 3 fc ~ 2 + 1, 3 fc - a • 3 fe ~ 2 + 1) = (1, a • 3 fc ~ 2 + 1, 2a • 3 fc ~ 2 + 1). Hence we must 
have 

b = 2a mod 9 and a ^ mod 9. (30) 

Case Bl gives 8r — 7 = a—r + 1 mod 3 fc and 8s — 7 = — r + 2 mod 3 fc , 
so s = 9r — 8 mod 3 fc . Substituting this into the first congruence gives r = 1 
mod 3 fc , which is impossible. Case B2 gives 8r — 7 = —r + 2 mod 3 fe and 
8s — 7 = s — r + 1 mod 3 fc . The first congruence implies r = 1 mod 3 fc_2 and 
the second implies 7(s — 1) = — (r — 1) mod 3 fc ; these two congruences together 
give s = 1 mod 3 fe_2 , so using ([2^)1 the second of these new congruences implies 
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lb + a = mod 9 and a ^ mod 9, that is we get ([5Uf again with a and 6 
interchanged. Note the case a — 6, b = 3 gives the short function /j = (1, r, s), 
and the case a = 2, 6 = 1 gives /g = (1, r, s). 

Case CI is identical to Case B2 with r and s interchanged, so we can conclude 
that in this case b = 2a mod 9. Case C2 is identical to Case Bl with r and s 
interchanged, so this case is impossible. 

Combining the above results, we see that without loss of generality we can 
assume that if (l,r,s) satisfies (|2"T|) , then (f2"9"|) and (|3"U|) hold. Thus we have 
eight possibilities for (l,r, s), say g a = (l,a-3 k ~ 1 + l,2a-3 fe_1 + 1), 1 < a < 8. 
If a = 3 or 6, we have the short function. For the other values of a, g a is affine 
equivalent to fa. To prove this, we simply choose r in (f2"T|) such that ar = 1 
mod 9 (possible since 3 does not divide a) and then 

a T {g a ) = (1, ar • 3 fe ~ 2 + 1, lar • 3 fe ~ 2 + 1) = fc. 

This completes the proof that for k > 3, the class of /2 is the only class of size 
3. 

Next we prove by induction that the equivalence class of fj is the only class 
of size 3 J_1 for each j > 2, assuming that we have already proved that the 
equivalence class of ft is the only class of size 3' -1 for each t < j. The six 
cases above give the base case j ' = 2. We simply repeat, mutatis mutandis, the 
calculations above for the case j ' = 2. 

Since the notation becomes complicated and the induction is straightforward, 
we only sketch the details. 

As before, first we take r = n — 2 in (|28|) . Case Al leads to the general 
version of (|2l))) . namely 

r = a • 3 fe_i + 1 and s = b- 3 k ~ j + 1 for some a and 6. (31) 

To see that Case A2 is impossible, we need the fact that 2 3J +1 = mod 3 J . 
To see that Case Bl gives the short function, we need the fact that 3 J+1 is the 
exact power of 3 which divides 2 3 +1. Case B2 turns out to be impossible as 
before, and Cases CI and C2 reduce to Cases B2 and Bl, respectively. 

Next we assume (|3"Tj) and take r = 2. Case Al is impossible and Case A2 
leads to (|3"Tj) again. From this we obtain a + b = mod 3 J and that leads to 
the general version of (|3"0|) . namely 

b = 2a mod 3 J ' and a^O mod 3 j , (32) 

where again we use the fact that 3 J+1 is the exact power of 3 which divides 
2 3J + 1. 

Case Bl is impossible and as above Case B2 leads to (f3"2"| again with a and 
b interchanged. As before, the cases CI and C2 reduce to the cases B2 and 
Bl, respectively, with r and s interchanged, so we can assume without loss of 
generality that dSJ) and ([32]) hold. 

Hence we have 3^ — 1 functions, say h a — (l,a ■ 3 k ^-' + 1,2a • 3 k ~ : ' + 1), 
1 < a < 3 J — 1. We use the notation 3™ l ||a to mean that 3 m is the exact power 
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of 3 which divides a. If a = 3 J_1 or 2-3- 7 ~ 1 (that is, 3 J_1 ||a), then h a is the short 
function. If 3 J ~ 2 ||a, then h a is of form (1, c-3 fe ~ 2 + l, 2c-3 fc ~ 2 + l) for some c not 
divisible by 3, and by our induction hypothesis h a is affine equivalent to f% and 
so is in the unique class of size 3. Similarly, if 3 J_ *||a for 1 <t<j — l, then h a 
is of form (1, c • 3 fc ~* + 1, 2c • 3 + 1) for some c not divisible by 3, and by our 
induction hypothesis h a is affine equivalent to f t and so is in the unique class of 
size 3* _1 . Finally, if 3 does not divide a, then h a is affine equivalent to fj. To 
prove this, we simply choose r in (J2"T)) such that ar = 1 mod 3 J (possible since 
3 does not divide a) and then cr T (h a ) — fj. This completes the proof that the 
class of fj is the only class of size 3 J_1 . □ 

Lemma 5.4. Suppose n — 3 fc and f — (1, r, s) is m an equivalence class of size 
2 ■ 3 J = t>(j), say, for 1 < j ' < k — 2. TTien /or every r noi divisible by 3 we ftave 

(r - 1)t u ^ + 1 = r mod 3* and (s - l)r" (i) + 1 = s mod 3 fc (33) 

anrf 

r = s = l mod a* - ' -1 . (34) 

Proof. Our hypotheses imply that for every r not divisible by 3 we have 

<(1, r, s) = (1, (r - 1)t» + 1,(8- IV + 1) = (1, r, s) (35) 

with v = v(j) = 2 ■ & and for at least one r ([35| is not true for any u such that 
< v < v(j). As in the proof of Lemma [5.21 (j3"5")l gives six cases Al, A2, Bl, 
B2, CI and C2. Equation (J33I) simply says that Case Al applies, so we shall 
show (f34"|) is true in Case Al and that none of the other cases are possible. 

In Case Al the first congruence in (|33| gives (t"^ — \)r = r v ^' — 1 mod 3 fe , 
which implies r = 1 mod 3 ■ ?_1 since 

t"< j ) = 1 mod 3 i+1 (36) 

by Euler's theorem. Similarly, the second congruence in (|33p gives s = 1 
mod 3 fe - J '- 1 , so fl34]) holds. 

Case A2 gives T v ^r - (t<^ - 1) = s mod 3* and t<^ s - (t v ^) - 1) = r 
mod 3 fc . Substituting the second congruence into the first gives (t 2v ^ — l)s = 
(j2v(j) _ ^ mod 3 fc , which implies s = 1 mod 3 fc_J_1 by (|36|) . By symmetry 
also r = 1 mod 3 - 7-1 , so if we put r = a-3 J ' -1 + l and s = b-3 ■ 7_1 + 1, say, 
then the first congruence implies a = b mod 3 J+1 . This gives r = s mod 3 fe , 
which is impossible. 

CaseBl gives r^'V - (t v ^ -1) = s-r+1 mod 3 fc andr^^s-^^-l) = 
— r + 2 mod 3 . The first congruence gives 

s = (r v( - j) + l)r - t" w mod3 fc , (37) 

and substituting this into the second congruence gives 

(t 2v{j) + T v{j) + l)r = t 2vU} + r v<J) + 1 mod 3 k . (38) 
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Since 3 does not divide r and v(j) is even, 3 but not 9 divides t 2v ^ +t v ^ + 1, 
so ([38]) gives r = 1 mod 3 fc_1 . Now (j37f gives also s = 1 mod 3 fe_1 , so (1, r, s) 
must be the short function, which contradicts our hypothesis. 

Case B2 gives T v{ J)r-{r v ^ -1) = -r + 2 mod 3 fe and r "(j) s _ ( r «(i) - 1) = 
s — r + 1 mod 3 fc , and the first congruence implies {t v v) + l)r = r"^) + 1 
mod 3 fe . This gives r = 1 mod 3 fc , which is impossible. 

As in the proofs of Lemmas 15.21 and 15.31 Cases CI and C2 reduce to cases 
B2 and Bl, respectively, so both lead to contradictions. □ 

Lemma 5.5. Suppose gk — (1,7", s) with s > r is a function in 3 k variables and 
9k-i = (Ij [ r /3] + 1, [s/3] + 1) is a function in 3 k ~ 1 variables. Then gk belongs 
to an equivalence class of size v(j) = 2 ■ i J for some j, 1 < j ' < k — 2, if and 
only if gk-i belongs to an equivalence class of the same size v(j). 

Proof. First we suppose gk has 3 fe variables and belongs to an equivalence class 
of size v(j). By Lemma [5TH (|3"3"j) and ([3^]) hold for the given j, so it follows that 
if r ^ mod 3, then 

( T «(7)_l)( r _l)/3 = modS*- 1 and (t bW -1)(*-1)/3 = mods' " 1 (39) 

Clearly (|3^|) is equivalent to saying that if r ^ mod 3, then the function 
h k -i = (1, (r + 2)/3, (s + 2)/3) in S* " 1 variables satisfies 

<«(l,(r + 2)/3,(.s + 2)/3)= (40) 

(1, r 1 ^ (r - l)/3 + 1, t*^ (s - l)/3 + 1) = (1, (r + 2)/3, (s + 2)/3) 

(the second equality follows from (|3"9"|l ). Since /ij,_ a = gijt_ 1 by (13"4"|) . P0]l shows 
that the equivalence class of <7fc_i has size < v(j). If P0]l were true with v(j) 
replaced by some proper divisor of v(j), then ([3^]) would also be true with that 
replacement, contradicting our hypothesis that the class of gk has size v(j). 
Thus the class of gk-x must have size v(j). 

For the converse, we assume gk-\ in 3 fc_1 variables belongs to an equivalence 
class of size v(j), 1 < j < k — 2. Then reversing the above argument shows that 
gk in 3 fc variables belongs to an equivalence class of the same size v(j). □ 

Lemma 5.6. An equivalence class of size 2 • Z J , j > 1, can occur only if n > 
3.7+1, jy jj^j^fc^ denotes the number of equivalence classes of size 2 • & when 
n = 3 fe , then U(j, k) = U(j,j + 1) for all k>j + l. 

Proof. The first sentence of the lemma follows from the fact that if n = 3 k , then 
the size of any equivalence class must be a divisor of \G n \ — <fi(3 k ) = 2 • 3 fe_1 . 
If there are U(j,j + 1) equivalence classes of size 2 • 3^ when n — 3 fe , then the 
proofs of Lemmas l5.4l andl 5.5l show that there are exactly U(j, j + l) equivalence 
classes of size 2 ■ 3 J when n = 3 fe for any k > j + 1. □ 

Now we can prove the theorem which provides a detailed description of the 
equivalence classes. 
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Theorem 5.7. Suppose n — 3 fe for k > 1. TTien 

s(3 fc ) = 3 fc_1 . (41) 

There is at least one equivalence class of size d for every divisor d / 2 «/ 
4>(n) = 2 • 3 , and no class of size 2. If d — 3 J , < j < fc — 1, there is exactly 
one equivalence class of size 3 J . The least representative in the lexicographical 
ordering of D n for the class of size 3 J is / J+ i = (1, 3* _ i— * + 1,2- 3 fe ~ : '~ 1 + 1) 
for < j < k - 1. 7/ d = 2 • 3 J ' ; 1 < j < k - 1, there are exactly 2 • 3-?" 1 - 1 
equivalence classes of size 2 • 3 J . 

Proof. Let F(n) = \D n \ — number of distinct cubic MRS functions (l,j, k) in 
n variables. It follows from Lemma [3.11 that F(n) — (n 2 — 3n + 6)/6 for all n 
divisible by 3. The assertions that there is exactly one equivalence class of size 
3 J ', < j < k — 1, and that this class has least representative fj+i follow from 
Lemmas l5.ll andl 5.3l The assertion that there is no class of size 2 is Lemma [5721 

The case n = 3 is trivial (one equivalence class f\ = (1, 2, 3) ) and the cases 
n = 9 and 27 of the theorem are shown in Tables 1 and 2. We assume that we 
have all the assertions in the theorem for all n = 3 J_1 , 2 < j < k, and we prove 
the theorem for the case n — 3 fc . We already have the cases for k < 3. The 
induction hypothesis proves the last sentence in the theorem for all j < k — 2. 

By our induction hypothesis and Lemma \5. 61 for n = 3 fe there are F(3 fc_1 ) 
functions in equivalence classes with size < </>(3 fc_1 ) = 2 • 3 fc_2 . By Lemma [5731 
for n — 3 fe there is also exactly one equivalence class of size 3 fc_1 . The number 
of functions that are not in any of these classes for n = 3 k is -F(3 fc ) — F(3 fc_1 ) — 
3 fe_1 = (4 • 3 2fc ~ 2 — 6 • 3 fc_1 )/3 = L(k), say. Since the size of every equivalence 
class divides <fi(n) — 2 • 3 fc_1 , all the remaining equivalence classes must have 
size 2 • 3 fc_1 . Thus there are exactly L(k)/{2 ■ 3^) = 2 • 3 fc ~ 2 - 1 classes of 
size 2 • 3 fc_1 . This proves the remaining case j = k — 1 of the last sentence in 
the theorem, and also completes the proof that there is at least one equivalence 
class of size d for every divisor d ^ 2 of <fr(n) = 2 • 3 fc_1 . Also we see that 
U(j,j + 1) in Lemma [5~6l is 2 • 3 J_1 — 1 for j > 1. 

The previous work shows that the number E(3 k ) of equivalence classes is 

fc-i fc-i 

^l + ]T(2.3.'- 1 -l) = 3 fc -\ 

3=0 3 = 1 

which proves (|4Tj) . □ 

Remark 5.8. It should be possible to extend the techniques in this paper to 
give a detailed description, similar to the one in Theorem l5.7[ for the cases when 
n is a power of any prime. The case n = 2 k will require special treatment. We 
do not consider these extensions in this paper. 

Remark 5.9. I acknowledge the valuable contributions of my research assis- 
tants Max Bileschi and Dan Padgett, whose work greatly facilitated the writing 
of this paper. Special thanks are due to Dan Padgett for his proof of Lemma 
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13.41 which is simpler than my original proof. I am grateful to Yuri Borissov for 
telling me about the Online Database of Boolean Functions [9] . 
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